Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200507-05 Advisory: Apache 1.3 Remote Code Exec Issue

gentoo
Calendar Grey June 21, 2004
Scroller Gentoo
Critical buffer overflow vulnerability discovered in Apache's mod_proxy, enabling remote code execution; immediate update advised for enhanced security.
A bug in mod_proxy may allow a remote attacker to execute arbitrary code when Apache is configured a certain way.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200406-16
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Apache 1.3: Buffer overflow in mod_proxy
      Date: June 21, 2004
      Bugs: #53544
        ID: 200406-16


Synopsis
=======
A bug in mod_proxy may allow a remote attacker to execute arbitrary
code when Apache is configured a certain way.

Background
=========
The Apache HTTP Server Project is an effort to develop and maintain an
open-source HTTP server for modern operating systems. The goal of this
project is to provide a secure, efficient and extensible server that
provides services in tune with the current HTTP standards.

Affected packages
================
    -------------------------------------------------------------------
     Package         /    Vulnerable    /                   Unaffected
    ---------------------------------------------------...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory denial of service gentoo apache arbitrary code execution mod_proxy

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo apache arbitrary code execution mod_proxy

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround